On 3/10/2010 10:28 AM, Brian Hawkins wrote:
Explain how using memcached opens one self to a DOS attack?

If you are expecting it to be a persistent store by itself, simply exceeding capacity will drop data before you expect it to expire. Of course if your sessions are tied to logins this would be harder to cause, and if you have a backing DB of critical entries then it's not a problem until you overwhelm the DB.

Memcache itself isn't a problem unless you expect it to always have your data, which it isn't intended to do.

--
  Les Mikesell
   lesmikes...@gmail.com

Reply via email to